ISO/IEC 29192-1:2012/Amd 1:2025

Overview

ISO/IEC 29192-1:2012/Amd 1:2025 is an amendment to the international standard for lightweight cryptography, focusing on general principles and updated guidance. Developed by ISO and IEC’s Joint Technical Committee JTC 1/SC 27 on information security, this amendment enhances the framework for lightweight cryptographic techniques suitable for resource-constrained environments. Lightweight cryptography offers essential security with reduced computational load, making it ideal for IoT devices, embedded systems, and other constrained hardware.

This amendment provides clarifications and additions concerning key cryptographic primitives-such as hash-functions, message authentication codes (MACs), broadcast authentication protocols, and authenticated encryption-tailored for lightweight implementations. It integrates with other relevant standards and supports a variety of secure information technology applications.

Key Topics

• Lightweight Hash-Functions
  A hash-function compresses variable-length inputs into fixed-length outputs, critical for digital signatures, data commitment, message authentication codes, and checksums. ISO/IEC 29192-5 defines lightweight hash-functions suitable for constrained environments, reaffirmed in this amendment through detailed subclauses.

• Message Authentication Codes (MACs)
  Lightweight MAC algorithms help verify data integrity and authenticate message origin using secret keys. This amendment outlines routes to implement lightweight MACs using:

  • MAC algorithms from ISO/IEC 9797-1 and ISO/IEC 9797-2 combined with block ciphers from ISO/IEC 29192-2 or hash-functions from ISO/IEC 29192-5.
  • Dedicated lightweight MAC functions exemplified in ISO/IEC 29192-6.

• Broadcast Authentication Protocols
  These protocols secure communications from a single sender to multiple receivers. The amendment acknowledges use cases where traditional digital signatures are too costly, introducing lightweight broadcast authentication defined in ISO/IEC 29192-7 to enable efficient verification of message authenticity and sender identity.

• Authenticated Encryption
  Combining confidentiality, integrity, and authenticity in one operation, authenticated encryption is fundamental for secure data processing. Aligned with ISO/IEC 19772 and referencing lightweight cryptographic methods in ISO/IEC 29192-8, this amendment supports balanced security and performance in constrained devices.

Applications

ISO/IEC 29192-1:2012/Amd 1:2025 is vital for industries requiring secure computing on devices with limited resources, including:

• Internet of Things (IoT) devices needing efficient yet robust security mechanisms.
• Embedded systems in automotive, medical, or industrial automation applications where performance and power consumption are critical.
• Wireless sensor networks requiring lightweight authentication and encryption protocols to secure data broadcasts.
• Smart cards and mobile devices benefiting from optimized cryptographic functions that extend battery life and reduce latency.

By adopting this amendment, organizations can implement cryptographic solutions that ensure strong security without overwhelming system resources, enabling widespread, secure deployment of connected technologies.

Related Standards

This amendment links and refers to several other international standards, providing a comprehensive cryptographic ecosystem:

• ISO/IEC 10118 (Hash-functions) – Standard for general-purpose cryptographic hash algorithms.
• ISO/IEC 9797 (Message Authentication Codes) – Defines MAC algorithms essential for data integrity and authentication.
• ISO/IEC 29192-2 (Lightweight block ciphers) – Specifies block cipher algorithms optimized for constrained environments.
• ISO/IEC 29192-5 (Lightweight hash-functions) – Focuses on hash-functions tailored for lightweight cryptographic applications.
• ISO/IEC 29192-6 (Lightweight MACs) – Details dedicated lightweight MAC functions for resource-limited platforms.
• ISO/IEC 29192-7 (Lightweight broadcast authentication) – Provides efficient protocols to authenticate broadcast messages.
• ISO/IEC 29192-8 (Lightweight authenticated encryption) – Specifies authenticated encryption methods suited for low-resource environments.
• ISO/IEC 19772 (Authenticated encryption) – Covers methods combining data confidentiality and integrity.

Together, these linked standards enable implementers to build modular, interoperable lightweight cryptographic schemes tailored to application-specific constraints.

Keywords: ISO/IEC 29192-1 amendment, lightweight cryptography, hash-functions, message authentication codes, broadcast authentication protocols, authenticated encryption, constrained environments, IoT security, embedded systems, lightweight security standards.